Lucene search
IscriptsEswap
2 matches found
CVE-2018-10048
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.
8.8CVSS8.6AI score0.00145EPSS
CVE-2018-11470
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
8.8CVSS9AI score0.00244EPSS